Cybersecurity for Media Technology Products

Metadata

Publisher: SMPTE — White Plains, NY, USA
Doc Type: Journal Article
Content Type: Original Research
Abbreviated Title: SMPTE Mot. Imag. J
Volume: 126, No. 1, pp. 1–4
Abstract: Cybersecurity is becoming a priority for media enterprises. Secure infrastructure demands careful planning and configuration, but it also requires components that are designed with security in mind. From experience at National TeleConsultants, a few basic security characteristics have been found desirable in media technology products, especially those connected to Internet Protocol networks. These -characteristics, described in this paper as recommendations to suppliers but also usable for product evaluation, were selected for practical improvement in security, compliance with security requirements typical of large organizations, or both, taking into account the unique requirements of networked media systems.
Publication Date: 2017-01-01
DOI: 10.5594/JMI.2016.2632358
ISSN: Print: 1545-0279 | Electronic: 2160-2492
Link: https://doi.org/10.5594/JMI.2016.2632358
Author(s): William Hooper
Keyword(s): Cybersecurity, Information Security, IP Networks, Security Development Life Cycle, Broadcast Infrastructure
Copyright: © 2016 SMPTE

Bibliographic Reference(s)

ISO.27001.2013 — ISO/IEC 27001:2013, “Information Technology — Security Techniques — Information Security Management Systems — Requirements,” Oct. 2013. EXTERNAL
ISO.27002.2013 — ISO/IEC 27002:2013, “Information Technology — Security Techniques — Code of Practice For Information Security Controls,” Oct. 2013. EXTERNAL
W. Dormann, “OpenSSL TLS Heartbeat Extension Read Overflow Discloses Sensitive Information,” Vulnerability Note VU#720951, CERT Division, Software Engineering Institute, Carnegie Mellon University, May 2014. http://www.kb.cert.org/vuls/id/720951, as on December 20, 2016. EXTERNAL
“BugTraq,” SecurityFocus, http://www.securityfocus.com/archive/1. EXTERNAL
B. P. Miller, “Fuzz Testing of Application Reliability,” May 2008. http://pages.cs.wisc.edu/~bart/fuzz/. EXTERNAL
J. Dunn, “Microsoft Red Faced as Security Essentials Downs Google Chrome,” Techworld, Oct. 3, 2011. http://www.techworld.com/news/security/microsoft-red-faced-as-security-essentials-downs-google-chrome-3307983/. EXTERNAL
Microsoft Developer Network, “[MS-ADOD]: Active Directory Protocols Overview,” v20150630, Microsoft Corp., June 2015. https://msdn.microsoft.com/en-us/library/hh871909.aspx. EXTERNAL
R. Anderson, Security Engineering: A Guide to Building Dependable Distributed Systems, 2nd ed., Wiley: Indianapolis, IN, 2008. http://www.cl.cam.ac.uk/~rja14/book.html, as on December 20, 2016. EXTERNAL
“Full Disclosure Mailing List.” http://seclists.org/fulldisclosure/. EXTERNAL
G. Lyon, The Official Nmap Project Guide to Network Discovery and Security Scanning. https://nmap.org/book/toc.html, as on December 20, 2016. EXTERNAL
M. Dowd, J. McDonald, and J. Schuh, The Art of Software Security Assessment: Identifying and Preventing Software Vulnerabilities, Addison Wesley: Upper Saddle River, 2014. EXTERNAL
Motion Picture Association of America, “Content Security Best Practices: Common Guidelines,” Version 3.0, Apr. 2015. http://www.mpaa.org/wp-content/uploads/2015/11/MPAA-Best-Practices-Common-Guidelines_V3_0_2015_04_02_FINAL-r7.pdf. EXTERNAL
M. Howard and D. LeBlanc, Writing Secure Code, 2nd ed., Microsoft: Redmond, CA. 2003. EXTERNAL
“Common Vulnerabilities and Exposures List,” The MITRE Corporation. https://cve.mitre.org/. EXTERNAL
M. Howard, “Fending Off Future Attacks by Reducing Attack Surface,” Feb. 2003. http://web.archive.org/web/20030620220244/ht t p: //m s d n .m ic r o s of t .c om / l i br a r y/e n - u s /d nc o de / ht m l / secure02132003.asp. EXTERNAL
G. Keizer, “Flawed McAfee Update Paralyzes Corporate PCs,” Computerworld, Apr. 21, 2010. http://www.computerworld.com/article/2517412. EXTERNAL
C. King, “GNU Bash Shell Executes Commands in Exported Functions in Environment Variables,” Vulnerability Note VU#252743, CERT Division, Software Engineering Institute, Carnegie Mellon University, Apr. 2015. http://www.kb.cert.org/vuls/id/252743, as on December 20, 2016. EXTERNAL
Common Criteria for Information Technology Security Evaluation,” Version 3.1, Revision 4, Sep. 2012. https://www.niap--ccevs.org/Documents_and_Guidance/cc_docs.cfm. EXTERNAL
R. C. Seacord, The CERT C Coding Standard: 98 Rules for Developing Safe, Reliable, and Secure Systems, Addison-Wesley: Upper Saddle River, 2014. EXTERNAL
IETF RFC 3411 [Active*]
IETF RFC 4510 [Active*]
IETF RFC 5358 [Active*]

Source Data (JSON)

Full registry record with provenance metadata. Open directly: /api/doc/10.5594-JMI.2016.2632358.json

Reference Tree

Explore all references and references to this document, as a navigable tree.

Open Reference Tree

Reference this Doc

Plain text (ISO 690 compliant)

Preview:

William Hooper; Cybersecurity for Media Technology Products, SMPTE Motion Imaging Journal ( Volume: 126, Issue: 1, 2017); SMPTE, 2017. Available at https://doi.org/10.5594/JMI.2016.2632358

Snippet:

William Hooper; Cybersecurity for Media Technology Products, SMPTE Motion Imaging Journal ( Volume: 126, Issue: 1, 2017); SMPTE, 2017. Available at https://doi.org/10.5594/JMI.2016.2632358

HTML (ISO 690 compliant)

Preview:

William Hooper; Cybersecurity for Media Technology Products, SMPTE Motion Imaging Journal ( Volume: 126, Issue: 1, 2017); SMPTE, 2017. Available at https://doi.org/10.5594/JMI.2016.2632358

Snippet:

<span class="citation">William Hooper; <cite>Cybersecurity for Media Technology Products</cite>, SMPTE Motion Imaging Journal ( Volume: 126, Issue: 1, 2017); SMPTE, 2017. Available at <a href="https://doi.org/10.5594/JMI.2016.2632358" target="_blank" rel="noopener">https://doi.org/10.5594/JMI.2016.2632358</a></span>

SMPTE's HTML Pub

Preview:

William Hooper; Cybersecurity for Media Technology Products, SMPTE Motion Imaging Journal ( Volume: 126, Issue: 1, 2017); SMPTE, 2017
doi: 10.5594/JMI.2016.2632358
url: https://doi.org/10.5594/JMI.2016.2632358

Snippet:

<li>
William Hooper; <cite id="bib-10-5594-jmi-2016-2632358">Cybersecurity for Media Technology Products</cite>, SMPTE Motion Imaging Journal ( Volume: 126, Issue: 1, 2017); SMPTE, 2017
<span class="doi">10.5594/JMI.2016.2632358</span>
</li>